CVE-2024-43487

Published: Sep 10, 2024Modified: Aug 10, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

Windows Mark of the Web Security Feature Bypass Vulnerability

Affected (13)

Products: Microsoft: Windows 10 1507, Windows 10 1607, Windows 10 1809, Windows 10 21h2, Windows 10 22h2, Windows Server 2012, Windows Server 2016, Windows Server 2019

8 products

Windows 10 1507

Windows 10 1607

Windows 10 1809

Windows 10 21h2

Windows 10 22h2

Windows Server 2012

Windows Server 2016

Windows Server 2019

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 10 1507	version < 10.0.10240.20766
Microsoft Windows 10 1507	version < 10.0.10240.20766
Microsoft Windows 10 1607	version < 10.0.14393.7336
Microsoft Windows 10 1607	version < 10.0.14393.7336
Microsoft Windows 10 1809	version < 10.0.17763.6293
Microsoft Windows 10 21h2	version < 10.0.19044.4894
Microsoft Windows 10 22h2	version < 10.0.19045.4894
Microsoft Windows 10 22h2	version < 10.0.19045.4894
Microsoft Windows 10 22h2	version < 10.0.19045.4894
Microsoft Windows Server 2012	All versions
Microsoft Windows Server 2012	Version r2
Microsoft Windows Server 2016	version < 10.0.14393.7336
Microsoft Windows Server 2019	version < 10.0.17763.6293

Related CWEs

Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43487

Source: secure@microsoft.com

PatchVendor Advisory

Timeline

No history available yet.